Data Protection for Pinterest and Instagram

Last updated: 2 November 2026 · Last updated: 2 November 2026

English summary

Nordvision & Gräfenhaus GbR (Hamburg, Germany) uses an internal tool called "Post-IT!" to publish images of its own products (www.nordvision-studio.com) as Pins on its own Pinterest business account, and as posts on its own Instagram business account. The tool is used only by the two business partners. It is not offered to the public, and no Pinterest user other than the account owner signs in to it.

What we access: after the account owner approves the Pinterest authorization screen (OAuth), we can read the Pinterest username and account ID and the list of boards, create boards, and create Pins. Scopes: user_accounts:read, boards:read, boards:write, pins:read, pins:write (Pinterest requires pins:read together with pins:write to create a Pin).
What we store: only the account ID, the username, the ID and name of the selected board, and the OAuth access and refresh tokens. We do not store or read other Pinterest users' data, followers, or any Pinterest content other than the Pins we create ourselves.
Why: only to publish the owner's own Pins at the time the owner chooses. Every Pin is individually selected and scheduled by one of the two partners; there is no automatic or bulk posting.
Where and how: in a private database (Supabase, EU) that only the operators can reach; tokens are accessible only to the server component of the tool and are never shown, shared, or sold. We do not use Pinterest data to train AI or machine learning models.
Control and deletion: the owner can disconnect Pinterest at any time with the "Trennen" button in the tool, which deletes the stored token and account link immediately. The authorization can also be revoked in the Pinterest settings. For other requests write to info@nordvision-studio.com.

Data Protection for Publishing on Pinterest and Instagram

Responsible party: Nordvision & Gräfenhaus GbR, Hamburg, Contact: info@nordvision-studio.com (for address, see Legal Notice).

What We Use Pinterest and Instagram For

We use an internal tool to publish images of our own products to our own Pinterest and Instagram business accounts. The tool is used exclusively by the two business partners. Visitors to our website and customers are not affected by this; their data is neither used for this purpose nor transmitted to Pinterest or Meta.

What Data We Receive from Pinterest and Meta and Store

Account ID and username of the connected business account
Name and ID of the board to which content is published (for Instagram, the ID of the connected account)
The technical access keys (tokens) issued by Pinterest or Meta following your consent

We do not read or store data of other users, follower lists, or third-party content. Access permissions requested from Pinterest: read account, read and create boards, read and create Pins (Pinterest requires read permissions for Pins alongside creating them).

Purpose and Legal Basis

The data is used exclusively to publish our own posts at the time of our choosing (Art. 6(1)(f) GDPR, legitimate interest in promoting our own products). Every post is individually selected and scheduled by one of the business partners. We do not sell or share this data with third parties and do not use it to train AI or machine learning models.

Storage Location and Protection

The data is stored in a private database (Supabase, data center in the EU). Access keys can only be read by the tool's server component and are never displayed. Access to the tool is restricted to the business partners.

Deletion and Revocation

The connection can be terminated at any time in the tool using the "Trennen" (Disconnect) button. This immediately deletes the tokens and account link. Consent can also be revoked in the settings of Pinterest or Meta. If you have any questions, please write to info@nordvision-studio.com.

In addition, our general Privacy Policy applies. Data processing by Pinterest and Meta is subject to their own privacy policies.